diff --git a/advisories/unreviewed/2023/12/GHSA-v727-f437-6cxx/GHSA-v727-f437-6cxx.json b/advisories/unreviewed/2023/12/GHSA-v727-f437-6cxx/GHSA-v727-f437-6cxx.json index 42abdb904c2..4b88204ce81 100644 --- a/advisories/unreviewed/2023/12/GHSA-v727-f437-6cxx/GHSA-v727-f437-6cxx.json +++ b/advisories/unreviewed/2023/12/GHSA-v727-f437-6cxx/GHSA-v727-f437-6cxx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v727-f437-6cxx", - "modified": "2024-02-22T09:31:03Z", + "modified": "2024-02-28T15:30:55Z", "published": "2023-12-21T21:30:31Z", "aliases": [ "CVE-2023-6546" @@ -33,6 +33,14 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:0937" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:1018" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:1019" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2023-6546" diff --git a/advisories/unreviewed/2024/01/GHSA-52x7-wcqq-wfjp/GHSA-52x7-wcqq-wfjp.json b/advisories/unreviewed/2024/01/GHSA-52x7-wcqq-wfjp/GHSA-52x7-wcqq-wfjp.json index 901c7d3569b..f2bda371e66 100644 --- a/advisories/unreviewed/2024/01/GHSA-52x7-wcqq-wfjp/GHSA-52x7-wcqq-wfjp.json +++ b/advisories/unreviewed/2024/01/GHSA-52x7-wcqq-wfjp/GHSA-52x7-wcqq-wfjp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-52x7-wcqq-wfjp", - "modified": "2024-01-02T18:30:20Z", + "modified": "2024-02-28T15:30:55Z", "published": "2024-01-02T18:30:20Z", "aliases": [ "CVE-2024-0193" @@ -21,6 +21,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0193" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:1018" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:1019" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-0193" diff --git a/advisories/unreviewed/2024/02/GHSA-24qg-89rj-g629/GHSA-24qg-89rj-g629.json b/advisories/unreviewed/2024/02/GHSA-24qg-89rj-g629/GHSA-24qg-89rj-g629.json new file mode 100644 index 00000000000..607e4f33874 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-24qg-89rj-g629/GHSA-24qg-89rj-g629.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-24qg-89rj-g629", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-24705" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24705" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/accessibility/wordpress-accessibility-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T15:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json b/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json new file mode 100644 index 00000000000..2abda3e6dd1 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2q38-w8jv-6jxm", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-24868" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager: from n/a through 4.69.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24868" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-69-contributor-sql-injection-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json b/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json new file mode 100644 index 00000000000..0c7747ff14d --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2x93-8973-5mgq/GHSA-2x93-8973-5mgq.json @@ -0,0 +1,82 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2x93-8973-5mgq", + "modified": "2024-02-28T15:30:56Z", + "published": "2024-02-28T15:30:56Z", + "aliases": [ + "CVE-2024-21885" + ], + "details": "A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21885" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0320" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0557" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0558" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0597" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0607" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0614" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0617" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0621" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0626" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0629" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-21885" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256540" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-122" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json b/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json new file mode 100644 index 00000000000..66989e0666e --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4p49-v2x9-3g3j", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-25927" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Joel Starnes postMash – custom post order.This issue affects postMash – custom post order: from n/a through 1.2.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25927" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/postmash/wordpress-postmash-custom-post-order-plugin-1-2-0-sql-injection-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json b/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json new file mode 100644 index 00000000000..9adc1a8b6e4 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4w5q-x8gv-qmwx", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-25902" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a through 4.7.2.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25902" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-2-admin-sql-injection-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json b/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json new file mode 100644 index 00000000000..fb48718a10b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6rg4-5cvm-2w3m", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-25910" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Skymoonlabs MoveTo.This issue affects MoveTo: from n/a through 6.2.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25910" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/moveto/wordpress-moveto-plugin-6-2-unauthenticated-sql-injection-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json b/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json new file mode 100644 index 00000000000..f2433e3ef06 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-9rj9-v7hh-cg8q/GHSA-9rj9-v7hh-cg8q.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9rj9-v7hh-cg8q", + "modified": "2024-02-28T15:30:56Z", + "published": "2024-02-28T15:30:56Z", + "aliases": [ + "CVE-2024-1965" + ], + "details": "Server-Side Request Forgery vulnerability in Haivision's Aviwest Manager and Aviwest Steamhub. This vulnerability could allow an attacker to enumerate internal network configuration without the need for credentials. An attacker could compromise an internal server and retrieve requests sent by other users.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1965" + }, + { + "type": "WEB", + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/server-side-request-forgery-vulnerability-haivision-products" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-918" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-f7mh-qr2g-w8j6/GHSA-f7mh-qr2g-w8j6.json b/advisories/unreviewed/2024/02/GHSA-f7mh-qr2g-w8j6/GHSA-f7mh-qr2g-w8j6.json new file mode 100644 index 00000000000..9649a809344 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-f7mh-qr2g-w8j6/GHSA-f7mh-qr2g-w8j6.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f7mh-qr2g-w8j6", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-27515" + ], + "details": "Osclass 5.1.2 is vulnerable to SQL Injection.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27515" + }, + { + "type": "WEB", + "url": "https://github.com/mindstellar/Osclass/issues/495" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-fwfw-qq2h-g6g5/GHSA-fwfw-qq2h-g6g5.json b/advisories/unreviewed/2024/02/GHSA-fwfw-qq2h-g6g5/GHSA-fwfw-qq2h-g6g5.json new file mode 100644 index 00000000000..06dabd0ffad --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-fwfw-qq2h-g6g5/GHSA-fwfw-qq2h-g6g5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fwfw-qq2h-g6g5", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2024-24702" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Restrict: from n/a through 2.5.5.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24702" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/pagerestrict/wordpress-page-restrict-plugin-2-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T15:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-jfrp-h2rj-4pmw/GHSA-jfrp-h2rj-4pmw.json b/advisories/unreviewed/2024/02/GHSA-jfrp-h2rj-4pmw/GHSA-jfrp-h2rj-4pmw.json new file mode 100644 index 00000000000..1d5bc397517 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-jfrp-h2rj-4pmw/GHSA-jfrp-h2rj-4pmw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jfrp-h2rj-4pmw", + "modified": "2024-02-28T15:30:56Z", + "published": "2024-02-28T15:30:56Z", + "aliases": [ + "CVE-2024-1808" + ], + "details": "The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_qrcode' shortcode in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1808" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3041647/shortcodes-ultimate" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/96769a0e-d4a9-4196-8ded-b600046c0943?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pgw3-qmf6-36m3/GHSA-pgw3-qmf6-36m3.json b/advisories/unreviewed/2024/02/GHSA-pgw3-qmf6-36m3/GHSA-pgw3-qmf6-36m3.json new file mode 100644 index 00000000000..702f2433fb8 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pgw3-qmf6-36m3/GHSA-pgw3-qmf6-36m3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pgw3-qmf6-36m3", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:57Z", + "aliases": [ + "CVE-2023-6917" + ], + "details": "A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6917" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2023-6917" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254983" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-378" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T15:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-vx3h-cj8w-2h2c/GHSA-vx3h-cj8w-2h2c.json b/advisories/unreviewed/2024/02/GHSA-vx3h-cj8w-2h2c/GHSA-vx3h-cj8w-2h2c.json new file mode 100644 index 00000000000..fab92f17ad0 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-vx3h-cj8w-2h2c/GHSA-vx3h-cj8w-2h2c.json @@ -0,0 +1,82 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vx3h-cj8w-2h2c", + "modified": "2024-02-28T15:30:57Z", + "published": "2024-02-28T15:30:56Z", + "aliases": [ + "CVE-2024-21886" + ], + "details": "A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circumstances, remote code execution in SSH X11 forwarding environments.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21886" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0320" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0557" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0558" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0597" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0607" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0614" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0617" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0621" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0626" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0629" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-21886" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256542" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-122" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-28T13:15:08Z" + } +} \ No newline at end of file